Escalating privileges
Stealing the password hashes
Out-of-band communication
SQL injection on mobile devices
Automating SQL injection exploitation
Summary
Solutions Fast Track
Chapter 5. Blind SQL Injection Exploitation
Introduction
Finding and confirming blind SQL injection
Using time-based techniques
Using Response-Based Techniques
Using Alternative Channels
Automating blind SQL injection exploitation
Summary
Solutions fast track
Chapter 6. Exploiting the operating system
Introduction
Accessing the file system
Executing operating system commands
Consolidating access
Summary
评论2